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Amendments to the Claims; 

This listing of claims will replace all prior versions, and listings, of claims in the 

application: 
Listing of Claims : 

1. (Previously Presented) A data transfer device, having a first data interface 
for exchanging data with a data processing system, a second data interface for exchanging data 
with a user device, and a control unit for selectively enabling data transfer between said first and 
second data interfaces in one of an open mode and a secure mode of operation, wherein said 
control unit is configured for receiving control data associated with an application to be 
processed by said data processing system and for providing an authentication check on said 
control data for setting said data transfer device in either one of the open and the secure modes of 
operation. 

2. (Previously Presented) A data transfer device according to claim 1 
wherein said control unit is configured for processing data provided by said first and second data 
interfaces in accordance with said control data. 

3. (Previously Presented) A data transfer device according to claim 1 
wherein said control unit is configured for processing data provided by said first and second data 
interfaces in accordance with program execution data to be executed by said data processing 
system, wherein said program execution data is comprised by said control data. 

4. (Previously Presented) A data transfer device according to claim 1 
wherein said control unit is configured for enabling part of said first and second data interfaces 
for operation in the open mode. 
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5. (Cancelled) 

6. (Previously Presented) A data transfer device according to claim 1 
wherein said control unit is configured for enabling said second data interface for operation in 
the secure mode and for executing program execution data if said data transfer device is set in 
the secure mode of operation. 

7. (Cancelled) 

8. (Currently Amended) A data transfer device according to claim 1, further 
comprising data storage means for storing certificate data, wherein said control data comprise 
certificate data, and said control data unit is configured for checking said certificate data of said 
control data with respect to certificate data stored in said data storage means, for setting said data 
transfer device in the secure mode of operation if said certificate data of said control data are 
approved and for setting said data transfer device in the open mode of operation for either one of 
disapproval of said certificate data and non-availability of certificate data of said control data, 
and for deleting said control data if said certificate data thereof are false. 

9. (Previously Presented) A data transfer device according to claim 1 
wherein said control unit is configured for enabling part of said first and second data interfaces 
for operation in an open mode, and wherein said control unit is configured for enabling said 
second data interface for operation in the secure mode, said second data interface comprises 
keypad means, data card reader means and display means, said control unit in said open mode is 
configured for enabling access to said data card reader means, and said control unit in said secure 
mode is configured for enabling access to said keypad means, data card reader means and display 
means. 
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10. (Previously Presented) A data transfer device according to claim 9 
wherein said control unit is configured for processing data provided by said card reader means in 
accordance with said control data received. 

1 1 . (Currently Amended) A data transfer device according to claim 1 wherein 
said control unit is configured for enabling part of said first and second data interfaces for 
operation in the open mode, and wherein said control unit is afe-configured for enabling said 
second data interface for operation in the secure mode, wherein said second data interface 
comprises Input/Output (I/O) means for data exchange with at least one peripheral device to be 
connected to said I/O means, and wherein said control unit in said secure mode is configured for 
enabling access to said I/O means by said at least one peripheral device. 

12. (Original) A data transfer device according to claim 1 1 wherein said I/O 
means are configured for connecting at least one data communication device. 

13. (Original) A data transfer device according to claim 1 1 wherein said I/O 
means are configured for connecting at least one Voice over IP (VoIP) digital telephone device. 

14. (Previously Presented) A data transfer device according to claim 1 
wherein said control unit is configured for enabling part of said first and second data interfaces 
for operation in an open mode, and wherein said control unit is configured for enabling said 
second data interface for operation in the secure mode, fiirther comprising signaling means for 
signaling said mode of operation of said data transfer device. 

15. (Previously Presented) A data transfer device according to claim 14 
wherein said signaling means comprise a Light Emitting Diode (LED), and said control unit is 
arranged for illuminating said LED if said data transfer device is in its secure mode of operation. 
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16. (Previously Presented) A data transfer device according to claim 1, 
further comprising means for supporting encrypted data transfer via said first interface. 

17. (Previously Presented) A data transfer device according to claim 1 
wherein said first data interface comprises a standardized computer data interface, such as USB 
(Universal Serial Bus) interface. 

18. (Previously Presented) A transaction system, comprising a first 
processing device such as to be operated by an authorization entity, a second processing device 
such as to be operated by a user, and a data transfer device having a first data interface to 
exchange data with a data processing system, a second data interface to exchange data with a 
user device, and a control unit to control data transfer between said first and second data 
interfaces in one of an open mode and a secure mode of operation, wherein said first and second 
processing devices connect to a data network, said data transfer device with its first interface 
connects to said second processing device, and said first and second processing devices being 
configured to exchange control data, associated with an application to be processed by said data 
processing system, fi-om said first processing device to said data transfer device, wherein said 
first processing device is configured to provide the control data to set said data transfer device in 
the secure mode or the open mode based on an authentication check performed on the control 
data by the control unit. 

19. (Cancelled) 

20. (Previously Presented) A transaction system, according to claim 18, 
fiirther comprising a third processing device such as to be operated by a transaction entity, 
wherein said third processing device connects to said data network, and said first processing 
device being configured to enable a transaction between said second and third processing devices 
dependent on enabling of said second data interface of said data transfer device. 
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21. (Previously Presented) A transaction system according to claim 20 
wherein said transaction between said second and third processing devices involves exchange of 
trusted data between said first and second processing devices, wherein said first processing 
device is configured to provide control data to set said data transfer device in the secure mode of 
operation and wherein said third processing device is configured to enable said transaction 
between said second and third processing devices after said trusted data have been successfiiUy 
exchanged. 

22. (Previously Presented) A transaction system according to claim 20 
wherein said second data interface comprises Input/Output (I/O) means for data exchange with at 
least one peripheral device to be connected to said I/O means, said transaction between said 
second and third processing devices involves exchange of trusted data between said first and 
second processing devices, said first processing device being configured to provide control data 
to set said data transfer device in the secure mode of operation and said third processing device is 
configured to enable a transaction between said I/O means and said third processing device after 
said trusted data have been successfiiUy exchanged. 

23. (Original) A transaction system according to claim 20 wherein said 
transaction entity is a telecommunication service provider. 

24. (Original) A transaction system according to claim 20, comprising a 
plurality of first, second and third processing devices wherein said data network is a public data 
network, such as the Internet. 

25. (Original) A first processing device configured for operating in 
accordance with claim 18. 
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26. (Original) A second processing device configured for operating in 
accordance with claim 18. 

27. (Original) A third processing device configured for operating in 
accordance with claim 20. 

28. (Previously Presented) A method of exchanging data with a data 
processing system using a data transfer device having a first data interface for exchanging data 
with said data processing system, a second data interface for exchanging data with a user device, 
and a control unit for controlling data transfer between said first and second data interfaces in 
one of an open mode and a secure mode of operation, said method comprising: 

transferring control data fi-om said data processing system to said data transfer 
device, the control data being associated with an application to be processed by the data 
processing system; and 

performing an authentication check on the control data to set the data transfer 
device in either one of the open and the secure modes of operation. 

29. (Cancelled) 

30. (Currently Amended) A method according to claim 39-28 wherein said 
control data comprise certificate data, wherein said control data being checked by said control 
unit with respect to said certificate data, and wherein said data transfer device is set in its secure 
mode of operation if said certificate data of said control data are approved and said data transfer 
device is set in its open mode of operation for either one of disapproval of said certificate data 
and non-availability of certificate data of said control data, said control data being deleted if said 
certificate data thereof are false. 
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31. (Previously Presented) A method according to claim 30 wherein said data 
transfer device in its open mode of operation exchanges data with said second data interface 
through a limited number of data input means thereof, including a data card reader, whereas the 
data transfer device in its secure mode of operation exchanges data with said second data 
interface through a plurality of data input and output devices thereof, including keypad unit, 
display unit, card reader unit, and Input/Output (I/O) imit for data exchange with at least one 
peripheral device to be connected to said I/O unit. 

32. (Currently Amended) A method according to claim 28 wherein data 
provided by said first and second data processing interfaces are processed in accordance with 
program execution data of a program executed by said data processing system, said program 
execution data being comprised by said control data. 

33. (Previously Presented) A method according to claim 31 wherein said I/O 
unit is enabled and disabled under control of program execution data of a program executed by 
said data processing system, said program execution data being comprised by said control data. 

34. (Previously Presented) A method according to claim 33 wherein said 
program execution data are operative in said data transfer device while a data card operatively 
connects to said card reader unit. 

35. (Original) A method according to claim 28 wherein data between said 
data processing system and said data transfer device are exchanged in an encrypted form. 

36. (Original) A method according to claim 28 wherein control data in said 
data transfer device are erased after the completion of a data exchange. 
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37. (Previously Presented) An Application Specific Integrated Circuit (ASIC) 
device comprising data exchange means and control means for selectively enabling data 
exchange between first and second data interfaces based on control data in accordance with 
claim 1. 

38. (Previously Presented) An ASIC device according to claim 37, further 
comprising at least one of said first and second data interfaces. 

39. (Previously Presented) An ASIC device according to claim 37, further 
comprising a data processing unit to process data provided by said first and second data 
interfaces in accordance with program execution data provided by said control data. 

40. (Previously Presented) An ASIC device according to claim 37, further 
comprising a data storage unit, among others to store said control data, said program execution 
data and authentication data. 
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